Sudo toolbox enter, fails in today kinoite 42

orichalcum · June 29, 2025, 7:56pm

Tried:

sudo toolbox create --distro fedora --release f42 vpn42c
sudo toolbox enter vpn42c

Works in yesterdays kinoite 42.20250628, but in todays kinoite 42.20250629.0 the sudo toolbox enter seems to do nothing (just don’t enter in the toolbox).

rpm-ostree status
State: idle
Deployments:
● fedora:fedora/42/x86_64/updates/kinoite
                  Version: 42.20250629.0 (2025-06-29T00:45:22Z)
                   Commit: a17ca3244998071b16f3e3b45ac54a85afef6d21a1c034a783ea244be9460430
             GPGSignature: Valid signature by B0F4950458F69E1150C6C5EDC8AC4916105EF944

  fedora:fedora/42/x86_64/updates/kinoite
                  Version: 42.20250628.0 (2025-06-28T00:42:17Z)
                   Commit: 0587fdc9b6982f69a0b06624baa614b08dfb20adb97fe0de6ae11ade223afcd0
             GPGSignature: Valid signature by B0F4950458F69E1150C6C5EDC8AC4916105EF944
                   Pinned: yes

evanmohr · June 29, 2025, 8:07pm

Try without sudo, it’s unnecessary and may be causing problems.

orichalcum · June 29, 2025, 11:02pm

Tried with a non-root container and don’t work for my f5 vpn.

If I do it as root, it just works. I have my workaround there.

sudo -i
toolbox create --distro fedora --release f42 vpn42c
toolbox enter vpn42c

What have changed? sudo or toolbox?

tqcharm · June 30, 2025, 6:36am

You can run the toolbox enter command with verbosity, to check for error messages:

toolbox enter vpn42c -v

mattm · July 11, 2025, 9:13am

I am having this same issue on multiple Kinoite 42 machines - both with the latest stable base and on the latest testing branch

Error: OCI runtime error: crun: read pipe failed

Deployments:
● fedora:fedora/42/x86_64/testing/kinoite
Version: 42.20250711.0 (2025-07-11T01:13:49Z)
BaseCommit: 68d69807ffe91391c07966798a4fb50e928901ba5168f038224c7bec369964f

matt@Vancouver:~$ sudo toolbox enter -v
Place your finger on the fingerprint reader
DEBU Running as real user ID 0
DEBU Resolved absolute path to the executable as /usr/bin/toolbox
DEBU Running on a cgroups v2 host
DEBU Looking up sub-GID and sub-UID ranges for user root
DEBU Look-up not needed: user root doesn’t need them
DEBU TOOLBX_DELAY_ENTRY_POINT is
DEBU TOOLBX_FAIL_ENTRY_POINT is
DEBU TOOLBOX_PATH is /usr/bin/toolbox
DEBU Migrating to newer Podman
DEBU Toolbx config directory is /root/.config/toolbox
DEBU Current Podman version is 5.5.2
DEBU Creating runtime directory /run/toolbox
DEBU Old Podman version is 5.5.2
DEBU Migration not needed: Podman version 5.5.2 is unchanged
DEBU Setting up configuration
DEBU Setting up configuration: file /root/.config/containers/toolbox.conf not found
DEBU Resolving container and image names
DEBU Container: ‘’
DEBU Distribution (CLI): ‘’
DEBU Image (CLI): ‘’
DEBU Release (CLI): ‘’
DEBU Resolved container and image names
DEBU Container: ‘fedora-toolbox-42’
DEBU Image: ‘fedora-toolbox:42’
DEBU Release: ‘42’
DEBU Resolving container and image names
DEBU Container: ‘’
DEBU Distribution (CLI): ‘’
DEBU Image (CLI): ‘’
DEBU Release (CLI): ‘’
DEBU Resolved container and image names
DEBU Container: ‘fedora-toolbox-42’
DEBU Image: ‘fedora-toolbox:42’
DEBU Release: ‘42’
DEBU Checking if container fedora-toolbox-42 exists
DEBU Container fedora-toolbox-42 not found
DEBU Fetching all containers
DEBU Found 1 containers
Error: container fedora-toolbox-42 not found
Entering container fedora-toolbox-41 instead.
Use the ‘create’ command to create a different Toolbx.
Run ‘toolbox --help’ for usage.
DEBU Inspecting container fedora-toolbox-41
DEBU Entry point of container fedora-toolbox-41 is toolbox (PID=0)
DEBU Inspecting mounts of container fedora-toolbox-41
DEBU Generating Container Device Interface for NVIDIA
DEBU Generating Container Device Interface for NVIDIA: Management Library not found: could not load NVML library: libnvidia-ml.so.1: cannot open shared object file: No such file or directory
DEBU Generating Container Device Interface for NVIDIA: not a Tegra system: /sys/devices/soc0/family file not found
DEBU Generating Container Device Interface for NVIDIA: skipping
DEBU Starting ‘p11-kit server’ with socket /run/toolbox/pkcs11
DEBU Starting container fedora-toolbox-41
DEBU Inspecting container fedora-toolbox-41
DEBU Entry point of container fedora-toolbox-41 is toolbox (PID=4319)
DEBU Waiting for container fedora-toolbox-41 to finish initializing
DEBU Checking if initialization stamp /run/toolbox/container-initialized-4319 exists
DEBU Setting up initialization timeout for container fedora-toolbox-41
DEBU Following logs for container fedora-toolbox-41
DEBU Setting up watches for file system events from container fedora-toolbox-41
DEBU Listening to container, ticker and timeout events
DEBU Handling file system event: operation CHMOD on /run/toolbox
DEBU Handling file system event: operation CREATE on /run/toolbox/container-initialized-4319
DEBU Handling file system event: operation CHMOD on /run/toolbox/container-initialized-4319
DEBU Received an error while following the logs: context canceled
DEBU Received an error while following the logs: EOF
DEBU Container fedora-toolbox-41 is initialized
DEBU Checking if ‘podman exec’ supports disabling the detach keys
DEBU ‘podman exec’ supports disabling the detach keys
DEBU Creating list of environment variables to forward
DEBU COLORTERM=truecolor
DEBU CONTAINERS_STORAGE_CONF is unset
DEBU DBUS_SESSION_BUS_ADDRESS is unset
DEBU DBUS_SYSTEM_BUS_ADDRESS is unset
DEBU DESKTOP_SESSION is unset
DEBU DISPLAY=:0
DEBU HISTCONTROL is unset
DEBU HISTFILE is unset
DEBU HISTFILESIZE is unset
DEBU HISTIGNORE is unset
DEBU HISTSIZE=1000
DEBU HISTTIMEFORMAT is unset
DEBU KONSOLE_VERSION is unset
DEBU LANG=en_AU.UTF-8
DEBU SHELL=/bin/bash
DEBU SSH_AUTH_SOCK is unset
DEBU TERM=xterm-256color
DEBU TOOLBOX_PATH=/usr/bin/toolbox
DEBU USER=root
DEBU VTE_VERSION is unset
DEBU WAYLAND_DISPLAY is unset
DEBU XAUTHORITY=/run/user/1000/xauth_oidDcY
DEBU XDG_CURRENT_DESKTOP is unset
DEBU XDG_DATA_DIRS is unset
DEBU XDG_MENU_PREFIX is unset
DEBU XDG_RUNTIME_DIR=/run/user/0
DEBU XDG_SEAT is unset
DEBU XDG_SESSION_CLASS=user-early
DEBU XDG_SESSION_DESKTOP is unset
DEBU XDG_SESSION_ID=c2
DEBU XDG_SESSION_TYPE=tty
DEBU XDG_VTNR is unset
DEBU XTERM_VERSION is unset
DEBU P11_KIT_SERVER_ADDRESS=unix:path=/run/toolbox/pkcs11
DEBU Running in container fedora-toolbox-41:
DEBU podman
DEBU --log-level
DEBU error
DEBU exec
DEBU --detach-keys
DEBU
DEBU --env=COLORTERM=truecolor
DEBU --env=DISPLAY=:0
DEBU --env=HISTSIZE=1000
DEBU --env=LANG=en_AU.UTF-8
DEBU --env=SHELL=/bin/bash
DEBU --env=TERM=xterm-256color
DEBU --env=TOOLBOX_PATH=/usr/bin/toolbox
DEBU --env=USER=root
DEBU --env=XAUTHORITY=/run/user/1000/xauth_oidDcY
DEBU --env=XDG_RUNTIME_DIR=/run/user/0
DEBU --env=XDG_SESSION_CLASS=user-early
DEBU --env=XDG_SESSION_ID=c2
DEBU --env=XDG_SESSION_TYPE=tty
DEBU --env=P11_KIT_SERVER_ADDRESS=unix:path=/run/toolbox/pkcs11
DEBU --interactive
DEBU --preserve-fds
DEBU 0
DEBU --tty
DEBU --user
DEBU root
DEBU --workdir
DEBU /var/home/matt
DEBU fedora-toolbox-41
DEBU capsh
DEBU --caps=
DEBU –
DEBU -c
DEBU exec “$@”
DEBU bash
DEBU /bin/bash
DEBU -l
Error: OCI runtime error: crun: read pipe failed

Jul 11 19:07:53 Vancouver fedora-toolbox-41[4317]: level=debug msg=“Creating runtime directory /run/toolbox”
Jul 11 19:07:53 Vancouver fedora-toolbox-41[4317]: level=debug msg="Loading Container Device Interface for NVIDIA from file /run/toolbox/cdi->
Jul 11 19:07:53 Vancouver fedora-toolbox-41[4317]: level=debug msg="Loading Container Device Interface for NVIDIA: file /run/toolbox/cdi-nvid>
Jul 11 19:07:53 Vancouver fedora-toolbox-41[4317]: level=debug msg=“Configuring Kerberos to use KCM as the default credential cache”
Jul 11 19:07:53 Vancouver fedora-toolbox-41[4317]: level=debug msg="Configuring Kerberos to use KCM as the default credential cache: file /et>
Jul 11 19:07:53 Vancouver fedora-toolbox-41[4317]: level=debug msg=“Configuring Kerberos to use KCM as the default credential cache: skipping”
Jul 11 19:07:53 Vancouver fedora-toolbox-41[4317]: level=debug msg=“Configuring PKCS #11 to read from the host”
Jul 11 19:07:53 Vancouver fedora-toolbox-41[4317]: level=debug msg=“Configuring PKCS #11 to read from the host: p11-kit-client.so not found”
Jul 11 19:07:53 Vancouver fedora-toolbox-41[4317]: level=debug msg=“Configuring PKCS #11 to read from the host: skipping”
Jul 11 19:07:53 Vancouver fedora-toolbox-41[4317]: level=debug msg=“Configuring RPM to ignore bind mounts”
Jul 11 19:07:53 Vancouver fedora-toolbox-41[4317]: level=debug msg=“Setting up daily ticker”
Jul 11 19:07:53 Vancouver fedora-toolbox-41[4317]: level=debug msg=“Setting up watches for file system events”
Jul 11 19:07:53 Vancouver fedora-toolbox-41[4317]: level=debug msg=“Finished initializing container”
Jul 11 19:07:53 Vancouver fedora-toolbox-41[4317]: level=debug msg=“Creating initialization stamp /run/toolbox/container-initialized-4319”
Jul 11 19:07:53 Vancouver fedora-toolbox-41[4317]: level=debug msg=“Listening to file system and ticker events”
Jul 11 19:07:53 Vancouver fedora-toolbox-41[4317]: level=warning msg=“Failed to run updatedb(8): updatedb(1) not found”
Jul 11 19:07:53 Vancouver conmon[4396]: conmon 9f6f58b16476a7b0e38c : Failed to create container: exit status 1

non root containers work fine

siosm · July 11, 2025, 9:26am

Please file a bug for GitHub - containers/toolbox: Tool for interactive command line environments on Linux.

I can reproduce that:

$ sudo toolbox enter fedora-toolbox-42 -vvv
DEBU Running as real user ID 0                    
DEBU Resolved absolute path to the executable as /usr/bin/toolbox 
DEBU Running on a cgroups v2 host                 
DEBU Looking up sub-GID and sub-UID ranges for user root 
DEBU Look-up not needed: user root doesn't need them 
DEBU TOOLBX_DELAY_ENTRY_POINT is                  
DEBU TOOLBX_FAIL_ENTRY_POINT is                   
DEBU TOOLBOX_PATH is /usr/bin/toolbox             
DEBU Migrating to newer Podman                    
DEBU Toolbx config directory is /root/.config/toolbox 
INFO[0000] podman filtering at log level debug          
DEBU[0000] Called version.PersistentPreRunE(podman --log-level debug version --format json) 
INFO[0000] Setting parallel job count to 25             
DEBU[0000] Using conmon: "/usr/bin/conmon"              
INFO[0000] Using sqlite as database backend             
DEBU[0000] Using graph driver overlay                   
DEBU[0000] Using graph root /var/lib/containers/storage 
DEBU[0000] Using run root /run/containers/storage       
DEBU[0000] Using static dir /var/lib/containers/storage/libpod 
DEBU[0000] Using tmp dir /run/libpod                    
DEBU[0000] Using volume path /var/lib/containers/storage/volumes 
DEBU[0000] Using transient store: false                 
DEBU[0000] [graphdriver] trying provided driver "overlay" 
DEBU[0000] overlay: imagestore=/usr/lib/containers/storage 
DEBU[0000] Cached value indicated that overlay is supported 
DEBU[0000] Cached value indicated that overlay is supported 
DEBU[0000] Cached value indicated that metacopy is being used 
DEBU[0000] Cached value indicated that native-diff is not being used 
INFO[0000] Not using native diff for overlay, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled 
DEBU[0000] backingFs=btrfs, projectQuotaSupported=false, useNativeDiff=false, usingMetacopy=true 
DEBU[0000] Initializing event backend journald          
DEBU[0000] Configured OCI runtime runj initialization failed: no valid executable found for OCI runtime runj: invalid argument 
DEBU[0000] Configured OCI runtime kata initialization failed: no valid executable found for OCI runtime kata: invalid argument 
DEBU[0000] Configured OCI runtime runsc initialization failed: no valid executable found for OCI runtime runsc: invalid argument 
DEBU[0000] Configured OCI runtime krun initialization failed: no valid executable found for OCI runtime krun: invalid argument 
DEBU[0000] Configured OCI runtime ocijail initialization failed: no valid executable found for OCI runtime ocijail: invalid argument 
DEBU[0000] Configured OCI runtime crun-vm initialization failed: no valid executable found for OCI runtime crun-vm: invalid argument 
DEBU[0000] Configured OCI runtime crun-wasm initialization failed: no valid executable found for OCI runtime crun-wasm: invalid argument 
DEBU[0000] Configured OCI runtime runc initialization failed: no valid executable found for OCI runtime runc: invalid argument 
DEBU[0000] Configured OCI runtime youki initialization failed: no valid executable found for OCI runtime youki: invalid argument 
DEBU[0000] Using OCI runtime "/usr/bin/crun"            
DEBU[0000] Called version.PersistentPostRunE(podman --log-level debug version --format json) 
DEBU[0000] Shutting down engines                        
INFO[0000] Received shutdown.Stop(), terminating!        PID=251782
DEBU Current Podman version is 5.5.2              
DEBU Creating runtime directory /run/toolbox      
DEBU Old Podman version is 5.5.2                  
DEBU Migration not needed: Podman version 5.5.2 is unchanged 
DEBU Setting up configuration                     
DEBU Setting up configuration: file /root/.config/containers/toolbox.conf not found 
DEBU Resolving container and image names          
DEBU Container: ''                                
DEBU Distribution (CLI): ''                       
DEBU Image (CLI): ''                              
DEBU Release (CLI): ''                            
DEBU Resolved container and image names           
DEBU Container: 'fedora-toolbox-42'               
DEBU Image: 'fedora-toolbox:42'                   
DEBU Release: '42'                                
DEBU Resolving container and image names          
DEBU Container: 'fedora-toolbox-42'               
DEBU Distribution (CLI): ''                       
DEBU Image (CLI): ''                              
DEBU Release (CLI): ''                            
DEBU Resolved container and image names           
DEBU Container: 'fedora-toolbox-42'               
DEBU Image: 'fedora-toolbox:42'                   
DEBU Release: '42'                                
DEBU Checking if container fedora-toolbox-42 exists 
INFO[0000] podman filtering at log level debug          
DEBU[0000] Called exists.PersistentPreRunE(podman --log-level debug container exists fedora-toolbox-42) 
INFO[0000] Setting parallel job count to 25             
DEBU[0000] Using conmon: "/usr/bin/conmon"              
INFO[0000] Using sqlite as database backend             
DEBU[0000] Using graph driver overlay                   
DEBU[0000] Using graph root /var/lib/containers/storage 
DEBU[0000] Using run root /run/containers/storage       
DEBU[0000] Using static dir /var/lib/containers/storage/libpod 
DEBU[0000] Using tmp dir /run/libpod                    
DEBU[0000] Using volume path /var/lib/containers/storage/volumes 
DEBU[0000] Using transient store: false                 
DEBU[0000] [graphdriver] trying provided driver "overlay" 
DEBU[0000] overlay: imagestore=/usr/lib/containers/storage 
DEBU[0000] Cached value indicated that overlay is supported 
DEBU[0000] Cached value indicated that overlay is supported 
DEBU[0000] Cached value indicated that metacopy is being used 
DEBU[0000] Cached value indicated that native-diff is not being used 
INFO[0000] Not using native diff for overlay, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled 
DEBU[0000] backingFs=btrfs, projectQuotaSupported=false, useNativeDiff=false, usingMetacopy=true 
DEBU[0000] Initializing event backend journald          
DEBU[0000] Configured OCI runtime runc initialization failed: no valid executable found for OCI runtime runc: invalid argument 
DEBU[0000] Configured OCI runtime runsc initialization failed: no valid executable found for OCI runtime runsc: invalid argument 
DEBU[0000] Configured OCI runtime ocijail initialization failed: no valid executable found for OCI runtime ocijail: invalid argument 
DEBU[0000] Configured OCI runtime crun-vm initialization failed: no valid executable found for OCI runtime crun-vm: invalid argument 
DEBU[0000] Configured OCI runtime crun-wasm initialization failed: no valid executable found for OCI runtime crun-wasm: invalid argument 
DEBU[0000] Configured OCI runtime runj initialization failed: no valid executable found for OCI runtime runj: invalid argument 
DEBU[0000] Configured OCI runtime kata initialization failed: no valid executable found for OCI runtime kata: invalid argument 
DEBU[0000] Configured OCI runtime youki initialization failed: no valid executable found for OCI runtime youki: invalid argument 
DEBU[0000] Configured OCI runtime krun initialization failed: no valid executable found for OCI runtime krun: invalid argument 
DEBU[0000] Using OCI runtime "/usr/bin/crun"            
DEBU[0000] Called exists.PersistentPostRunE(podman --log-level debug container exists fedora-toolbox-42) 
DEBU[0000] Shutting down engines                        
INFO[0000] Received shutdown.Stop(), terminating!        PID=251793
DEBU Inspecting container fedora-toolbox-42       
INFO[0000] podman filtering at log level debug          
DEBU[0000] Called inspect.PersistentPreRunE(podman --log-level debug inspect --format json --type container fedora-toolbox-42) 
INFO[0000] Setting parallel job count to 25             
DEBU[0000] Using conmon: "/usr/bin/conmon"              
INFO[0000] Using sqlite as database backend             
DEBU[0000] Using graph driver overlay                   
DEBU[0000] Using graph root /var/lib/containers/storage 
DEBU[0000] Using run root /run/containers/storage       
DEBU[0000] Using static dir /var/lib/containers/storage/libpod 
DEBU[0000] Using tmp dir /run/libpod                    
DEBU[0000] Using volume path /var/lib/containers/storage/volumes 
DEBU[0000] Using transient store: false                 
DEBU[0000] [graphdriver] trying provided driver "overlay" 
DEBU[0000] overlay: imagestore=/usr/lib/containers/storage 
DEBU[0000] Cached value indicated that overlay is supported 
DEBU[0000] Cached value indicated that overlay is supported 
DEBU[0000] Cached value indicated that metacopy is being used 
DEBU[0000] Cached value indicated that native-diff is not being used 
INFO[0000] Not using native diff for overlay, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled 
DEBU[0000] backingFs=btrfs, projectQuotaSupported=false, useNativeDiff=false, usingMetacopy=true 
DEBU[0000] Initializing event backend journald          
DEBU[0000] Configured OCI runtime crun-vm initialization failed: no valid executable found for OCI runtime crun-vm: invalid argument 
DEBU[0000] Configured OCI runtime runc initialization failed: no valid executable found for OCI runtime runc: invalid argument 
DEBU[0000] Configured OCI runtime kata initialization failed: no valid executable found for OCI runtime kata: invalid argument 
DEBU[0000] Configured OCI runtime youki initialization failed: no valid executable found for OCI runtime youki: invalid argument 
DEBU[0000] Configured OCI runtime ocijail initialization failed: no valid executable found for OCI runtime ocijail: invalid argument 
DEBU[0000] Configured OCI runtime crun-wasm initialization failed: no valid executable found for OCI runtime crun-wasm: invalid argument 
DEBU[0000] Configured OCI runtime runj initialization failed: no valid executable found for OCI runtime runj: invalid argument 
DEBU[0000] Configured OCI runtime runsc initialization failed: no valid executable found for OCI runtime runsc: invalid argument 
DEBU[0000] Configured OCI runtime krun initialization failed: no valid executable found for OCI runtime krun: invalid argument 
DEBU[0000] Using OCI runtime "/usr/bin/crun"            
DEBU[0000] Looking up image "24d2a7c0723dda53c457bdbf43dc62c768ae58a299cf4fc6408daddccaa2f2ae" in local containers storage 
DEBU[0000] Trying "24d2a7c0723dda53c457bdbf43dc62c768ae58a299cf4fc6408daddccaa2f2ae" ... 
DEBU[0000] parsed reference into "[overlay@/var/lib/containers/storage+/run/containers/storage:overlay.imagestore=/usr/lib/containers/storage,overlay.mountopt=nodev,metacopy=on]@24d2a7c0723dda53c457bdbf43dc62c768ae58a299cf4fc6408daddccaa2f2ae" 
DEBU[0000] Found image "24d2a7c0723dda53c457bdbf43dc62c768ae58a299cf4fc6408daddccaa2f2ae" as "24d2a7c0723dda53c457bdbf43dc62c768ae58a299cf4fc6408daddccaa2f2ae" in local containers storage 
DEBU[0000] Found image "24d2a7c0723dda53c457bdbf43dc62c768ae58a299cf4fc6408daddccaa2f2ae" as "24d2a7c0723dda53c457bdbf43dc62c768ae58a299cf4fc6408daddccaa2f2ae" in local containers storage ([overlay@/var/lib/containers/storage+/run/containers/storage:overlay.imagestore=/usr/lib/containers/storage,overlay.mountopt=nodev,metacopy=on]@24d2a7c0723dda53c457bdbf43dc62c768ae58a299cf4fc6408daddccaa2f2ae) 
DEBU[0000] Successfully loaded 1 networks               
DEBU[0000] Called inspect.PersistentPostRunE(podman --log-level debug inspect --format json --type container fedora-toolbox-42) 
DEBU[0000] Shutting down engines                        
INFO[0000] Received shutdown.Stop(), terminating!        PID=251805
DEBU Entry point of container fedora-toolbox-42 is toolbox (PID=251022) 
DEBU Inspecting mounts of container fedora-toolbox-42 
DEBU Generating Container Device Interface for NVIDIA 
DEBU Generating Container Device Interface for NVIDIA: Management Library not found: could not load NVML library: libnvidia-ml.so.1: cannot open shared object file: No such file or directory 
DEBU Generating Container Device Interface for NVIDIA: not a Tegra system: /sys/devices/soc0/family file not found 
DEBU Generating Container Device Interface for NVIDIA: skipping 
DEBU Starting 'p11-kit server' with socket /run/toolbox/pkcs11 
DEBU Starting 'p11-kit server': socket /run/toolbox/pkcs11 already exists 
DEBU Starting 'p11-kit server': skipping          
DEBU Checking if initialization stamp /run/toolbox/container-initialized-251022 exists 
DEBU Container fedora-toolbox-42 is initialized   
DEBU Checking if 'podman exec' supports disabling the detach keys 
DEBU 'podman exec' supports disabling the detach keys 
DEBU Creating list of environment variables to forward 
DEBU COLORTERM=truecolor                          
DEBU CONTAINERS_STORAGE_CONF is unset             
DEBU DBUS_SESSION_BUS_ADDRESS is unset            
DEBU DBUS_SYSTEM_BUS_ADDRESS is unset             
DEBU DESKTOP_SESSION is unset                     
DEBU DISPLAY=:0                                   
DEBU HISTCONTROL is unset                         
DEBU HISTFILE is unset                            
DEBU HISTFILESIZE is unset                        
DEBU HISTIGNORE is unset                          
DEBU HISTSIZE=5000                                
DEBU HISTTIMEFORMAT is unset                      
DEBU KONSOLE_VERSION is unset                     
DEBU LANG=en_US.UTF-8                             
DEBU SHELL=/bin/bash                              
DEBU SSH_AUTH_SOCK is unset                       
DEBU TERM=xterm-256color                          
DEBU TOOLBOX_PATH=/usr/bin/toolbox                
DEBU USER=root                                    
DEBU VTE_VERSION is unset                         
DEBU WAYLAND_DISPLAY is unset                     
DEBU XAUTHORITY=/run/user/1000/xauth_QaRiDk       
DEBU XDG_CURRENT_DESKTOP is unset                 
DEBU XDG_DATA_DIRS is unset                       
DEBU XDG_MENU_PREFIX is unset                     
DEBU XDG_RUNTIME_DIR=/run/user/0                  
DEBU XDG_SEAT is unset                            
DEBU XDG_SESSION_CLASS=user-early                 
DEBU XDG_SESSION_DESKTOP is unset                 
DEBU XDG_SESSION_ID=c19                           
DEBU XDG_SESSION_TYPE=tty                         
DEBU XDG_VTNR is unset                            
DEBU XTERM_VERSION is unset                       
DEBU P11_KIT_SERVER_ADDRESS=unix:path=/run/toolbox/pkcs11 
DEBU Running in container fedora-toolbox-42:      
DEBU podman                                       
DEBU --log-level                                  
DEBU debug                                        
DEBU exec                                         
DEBU --detach-keys                                
DEBU                                              
DEBU --env=COLORTERM=truecolor                    
DEBU --env=DISPLAY=:0                             
DEBU --env=HISTSIZE=5000                          
DEBU --env=LANG=en_US.UTF-8                       
DEBU --env=SHELL=/bin/bash                        
DEBU --env=TERM=xterm-256color                    
DEBU --env=TOOLBOX_PATH=/usr/bin/toolbox          
DEBU --env=USER=root                              
DEBU --env=XAUTHORITY=/run/user/1000/xauth_QaRiDk 
DEBU --env=XDG_RUNTIME_DIR=/run/user/0            
DEBU --env=XDG_SESSION_CLASS=user-early           
DEBU --env=XDG_SESSION_ID=c19                     
DEBU --env=XDG_SESSION_TYPE=tty                   
DEBU --env=P11_KIT_SERVER_ADDRESS=unix:path=/run/toolbox/pkcs11 
DEBU --interactive                                
DEBU --preserve-fds                               
DEBU 0                                            
DEBU --tty                                        
DEBU --user                                       
DEBU root                                         
DEBU --workdir                                    
DEBU /var/home/tim                                
DEBU fedora-toolbox-42                            
DEBU capsh                                        
DEBU --caps=                                      
DEBU --                                           
DEBU -c                                           
DEBU exec "$@"                                    
DEBU bash                                         
DEBU /bin/bash                                    
DEBU -l                                           
INFO[0000] podman filtering at log level debug          
DEBU[0000] Called exec.PersistentPreRunE(podman --log-level debug exec --detach-keys  --env=COLORTERM=truecolor --env=DISPLAY=:0 --env=HISTSIZE=5000 --env=LANG=en_US.UTF-8 --env=SHELL=/bin/bash --env=TERM=xterm-256color --env=TOOLBOX_PATH=/usr/bin/toolbox --env=USER=root --env=XAUTHORITY=/run/user/1000/xauth_QaRiDk --env=XDG_RUNTIME_DIR=/run/user/0 --env=XDG_SESSION_CLASS=user-early --env=XDG_SESSION_ID=c19 --env=XDG_SESSION_TYPE=tty --env=P11_KIT_SERVER_ADDRESS=unix:path=/run/toolbox/pkcs11 --interactive --preserve-fds 0 --tty --user root --workdir /var/home/tim fedora-toolbox-42 capsh --caps= -- -c exec "$@" bash /bin/bash -l) 
INFO[0000] Setting parallel job count to 25             
DEBU[0000] Using conmon: "/usr/bin/conmon"              
INFO[0000] Using sqlite as database backend             
DEBU[0000] Using graph driver overlay                   
DEBU[0000] Using graph root /var/lib/containers/storage 
DEBU[0000] Using run root /run/containers/storage       
DEBU[0000] Using static dir /var/lib/containers/storage/libpod 
DEBU[0000] Using tmp dir /run/libpod                    
DEBU[0000] Using volume path /var/lib/containers/storage/volumes 
DEBU[0000] Using transient store: false                 
DEBU[0000] [graphdriver] trying provided driver "overlay" 
DEBU[0000] overlay: imagestore=/usr/lib/containers/storage 
DEBU[0000] Cached value indicated that overlay is supported 
DEBU[0000] Cached value indicated that overlay is supported 
DEBU[0000] Cached value indicated that metacopy is being used 
DEBU[0000] Cached value indicated that native-diff is not being used 
INFO[0000] Not using native diff for overlay, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled 
DEBU[0000] backingFs=btrfs, projectQuotaSupported=false, useNativeDiff=false, usingMetacopy=true 
DEBU[0000] Initializing event backend journald          
DEBU[0000] Configured OCI runtime runc initialization failed: no valid executable found for OCI runtime runc: invalid argument 
DEBU[0000] Configured OCI runtime kata initialization failed: no valid executable found for OCI runtime kata: invalid argument 
DEBU[0000] Configured OCI runtime runsc initialization failed: no valid executable found for OCI runtime runsc: invalid argument 
DEBU[0000] Configured OCI runtime krun initialization failed: no valid executable found for OCI runtime krun: invalid argument 
DEBU[0000] Configured OCI runtime runj initialization failed: no valid executable found for OCI runtime runj: invalid argument 
DEBU[0000] Configured OCI runtime youki initialization failed: no valid executable found for OCI runtime youki: invalid argument 
DEBU[0000] Configured OCI runtime ocijail initialization failed: no valid executable found for OCI runtime ocijail: invalid argument 
DEBU[0000] Configured OCI runtime crun-vm initialization failed: no valid executable found for OCI runtime crun-vm: invalid argument 
DEBU[0000] Configured OCI runtime crun-wasm initialization failed: no valid executable found for OCI runtime crun-wasm: invalid argument 
DEBU[0000] Using OCI runtime "/usr/bin/crun"            
DEBU[0000] Handling terminal attach                     
INFO[0000] Created exec session 3293c220369943bf00f5d24cf77560c3fbc650263d0cbea929accf47fee0f77f in container 35032de048ec29e24394bb9dc1aa50e82a6f0acb833191bb1e69b80d16484e17 
DEBU[0000] Sending resize events to exec session 3293c220369943bf00f5d24cf77560c3fbc650263d0cbea929accf47fee0f77f 
INFO[0000] Going to start container 35032de048ec29e24394bb9dc1aa50e82a6f0acb833191bb1e69b80d16484e17 exec session 3293c220369943bf00f5d24cf77560c3fbc650263d0cbea929accf47fee0f77f and attach to it 
DEBU[0000] /usr/bin/conmon messages will be logged to syslog 
DEBU[0000] running conmon: /usr/bin/conmon               args="[--api-version 1 -c 35032de048ec29e24394bb9dc1aa50e82a6f0acb833191bb1e69b80d16484e17 -u 3293c220369943bf00f5d24cf77560c3fbc650263d0cbea929accf47fee0f77f -r /usr/bin/crun -b /var/lib/containers/storage/overlay-containers/35032de048ec29e24394bb9dc1aa50e82a6f0acb833191bb1e69b80d16484e17/userdata/3293c220369943bf00f5d24cf77560c3fbc650263d0cbea929accf47fee0f77f -p /var/lib/containers/storage/overlay-containers/35032de048ec29e24394bb9dc1aa50e82a6f0acb833191bb1e69b80d16484e17/userdata/3293c220369943bf00f5d24cf77560c3fbc650263d0cbea929accf47fee0f77f/exec_pid -n fedora-toolbox-42 --exit-dir /var/lib/containers/storage/overlay-containers/35032de048ec29e24394bb9dc1aa50e82a6f0acb833191bb1e69b80d16484e17/userdata/3293c220369943bf00f5d24cf77560c3fbc650263d0cbea929accf47fee0f77f/exit --persist-dir /var/lib/containers/storage/overlay-containers/35032de048ec29e24394bb9dc1aa50e82a6f0acb833191bb1e69b80d16484e17/userdata/3293c220369943bf00f5d24cf77560c3fbc650263d0cbea929accf47fee0f77f/persist/35032de048ec29e24394bb9dc1aa50e82a6f0acb833191bb1e69b80d16484e17 --full-attach -s -l none --log-level debug --syslog -t -i -e --exec-attach --exec-process-spec /var/lib/containers/storage/overlay-containers/35032de048ec29e24394bb9dc1aa50e82a6f0acb833191bb1e69b80d16484e17/userdata/3293c220369943bf00f5d24cf77560c3fbc650263d0cbea929accf47fee0f77f/exec-process-403660346 --exit-command /usr/bin/podman --exit-command-arg --root --exit-command-arg /var/lib/containers/storage --exit-command-arg --runroot --exit-command-arg /run/containers/storage --exit-command-arg --log-level --exit-command-arg debug --exit-command-arg --cgroup-manager --exit-command-arg systemd --exit-command-arg --tmpdir --exit-command-arg /run/libpod --exit-command-arg --network-config-dir --exit-command-arg  --exit-command-arg --network-backend --exit-command-arg netavark --exit-command-arg --volumepath --exit-command-arg /var/lib/containers/storage/volumes --exit-command-arg --db-backend --exit-command-arg sqlite --exit-command-arg --transient-store=false --exit-command-arg --runtime --exit-command-arg crun --exit-command-arg --storage-driver --exit-command-arg overlay --exit-command-arg --storage-opt --exit-command-arg overlay.imagestore=/usr/lib/containers/storage --exit-command-arg --storage-opt --exit-command-arg overlay.mountopt=nodev,metacopy=on --exit-command-arg --events-backend --exit-command-arg journald --exit-command-arg --syslog --exit-command-arg container --exit-command-arg cleanup --exit-command-arg --stopped-only --exit-command-arg --exec --exit-command-arg 3293c220369943bf00f5d24cf77560c3fbc650263d0cbea929accf47fee0f77f --exit-command-arg 35032de048ec29e24394bb9dc1aa50e82a6f0acb833191bb1e69b80d16484e17]"
INFO[0000] Running conmon under slice machine.slice and unitName libpod-conmon-35032de048ec29e24394bb9dc1aa50e82a6f0acb833191bb1e69b80d16484e17.scope 
DEBU[0000] Attaching to container 35032de048ec29e24394bb9dc1aa50e82a6f0acb833191bb1e69b80d16484e17 exec session 3293c220369943bf00f5d24cf77560c3fbc650263d0cbea929accf47fee0f77f 
DEBU[0000] Received: 0                                  
DEBU[0000] Received: -1                                 
INFO[0000] Removing container 35032de048ec29e24394bb9dc1aa50e82a6f0acb833191bb1e69b80d16484e17 exec session 3293c220369943bf00f5d24cf77560c3fbc650263d0cbea929accf47fee0f77f 
DEBU[0000] Successfully removed container 35032de048ec29e24394bb9dc1aa50e82a6f0acb833191bb1e69b80d16484e17 exec session 3293c220369943bf00f5d24cf77560c3fbc650263d0cbea929accf47fee0f77f 
Error: OCI runtime error: crun: [conmon:d]: exec with attach is waiting for start message from parent
[conmon:d]: exec with attach got start message from parent
read pipe failed
DEBU[0000] Shutting down engines                        
INFO[0000] Received shutdown.Stop(), terminating!        PID=251818

Attaching manually to the container works:

sudo podman ps
sudo podman exec -ti 35032de048ec bash

mattm · July 12, 2025, 8:51am

github.com/containers/toolbox

Failure to attach to container when run under sudo

opened 08:50AM - 12 Jul 25 UTC

mmcnutt

1. Bug

Running a toolbox under sudo fails to give a bash prompt **Steps how to reprodu…ce the behaviour** 1. create a toolbox with "sudo toolbox" 2. enter toolbox with sudo toolbox enter -v 3. Error: OCI runtime error: crun: read pipe failed can attach to the container manually with podman exec bash **Expected behaviour** a prompt in the toolbox **Actual behaviour** returned to normal session **Output of `toolbox --version` (v0.0.90+)** toolbox version 0.1.2 **Toolbx package info (`rpm -q toolbox`)** toolbox version 0.1.2 **Output of `podman version`** Client: Podman Engine Version: 5.5.2 API Version: 5.5.2 Go Version: go1.24.4 Git Commit: e7d8226745ba07a64b7176a7f128e4ef53225a0e Built: Tue Jun 24 10:00:00 2025 Build Origin: Fedora Project OS/Arch: linux/amd64 **Info about your OS** Fedora Kinoite 42 Version: 42.20250711.0 (2025-07-11T01:13:49Z) BaseCommit: 68d69807ffe91391c07966798a4fb50e928901ba5168f038224c7bec369964f **Additional context** reproducible across multiple machines and users https://discussion.fedoraproject.org/t/sudo-toolbox-enter-fails-in-today-kinoite-42/156833/4

Topic		Replies	Views
Running `sudo -n /any/thing` inside a Toolbx fails with 'sudo: a password is required' Ask Fedora problem	0	332	June 28, 2023
Toolbox error on Fedora Kinoite Rawhide Ask Fedora amd , toolbx , fedora-rawhide , kinoite	3	333	November 27, 2023
Fedora toolbox not working on Silverblue (probably NVIDIA related) Ask Fedora podman , nvidia , silverblue , f42 , atomic-desktops , nvidia-proprietary	4	140	June 6, 2025
Fedora 42 Kinoite doesn't boot anymore (yesterday evening it did) Ask Fedora kinoite , f42	19	332	June 27, 2025
Toolbox + sudo error Project Discussion silverblue-team	6	1729	June 1, 2019

Sudo toolbox enter, fails in today kinoite 42

Related topics